HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2016-9160

CVSS 8.1v3.0pub. 2016-12-17upd. 2026-05-06

A vulnerability in SIEMENS SIMATIC WinCC (All versions < SIMATIC WinCC V7.2) and SIEMENS SIMATIC PCS 7 (All versions < SIMATIC PCS 7 V8.0 SP1) could allow a remote attacker to crash an ActiveX component or leak parts of the application memory if a user is tricked into clicking on a malicious link under certain conditions.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

  • Siemens Simatic Pcs 7

    APP
    Siemens
    ≤ 8.0

  • Siemens Simatic Wincc

    APP
    Siemens
    ≤ 7.1
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2023-25910CRITICAL10.0ten sam produkt

A vulnerability has been identified in SIMATIC PCS 7 (All versions < V9.1 SP2 UC04), SIMATIC S7-PM (All versio...

CVE-2021-40358CRITICAL9.9ten sam produkt

A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V...

CVE-2019-10922CRITICAL9.8ten sam produkt

A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 and n...

CVE-2016-5743CRITICAL9.8ten sam produkt

Siemens SIMATIC WinCC before 7.3 Update 10 and 7.4 before Update 1, SIMATIC BATCH before 8.1 SP1 Update 9 as d...

CVE-2023-48363HIGH7.1ten sam produkt

A vulnerability has been identified in OpenPCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC BATCH V9.1 (All ...